Countermeasures for protecting cloud operations against external attackers include all of the following except:

• A.Continual monitoring for anomalous activity.
• B.Detailed and extensive background checks.
• C.Regular and detailed configuration/change management activities
• D.Hardened devices and systems, including servers, hosts, hypervisors, and virtual machines.

Comment: *

Name: *

Email: *

Verification: *

The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing.
According to the CSA, what is one reason the threat of insecure interfaces and APIs is so prevalent in cloud computing?

• A.APIs can have automated settings.
• B.Cloud customers and third parties are continually enhancing and modifying APIs.
• C.APIs are a form of malware.
• D.It is impossible to uninstall APIs.

Comment: *

Name: *

Email: *

Verification: *

Where is a DLP solution generally installed when utilized for monitoring data in use?

• A.Application server
• B.Database server
• C.Network perimeter
• D.User's client

Comment: *

Name: *

Email: *

Verification: *

Which of the following threat types involves an application developer leaving references to internal information and configurations in code that is exposed to the client?

• A.Sensitive data exposure
• B.Security misconfiguration
• C.Insecure direct object references
• D.Unvalidated redirect and forwards

Comment: *

Name: *

Email: *

Verification: *

Deviations from the baseline should be investigated and __________________.

• A.Revealed
• B.Documented
• C.Encouraged
• D.Enforced

Comment: *

Name: *

Email: *

Verification: *